Cloudflare has been leaking https traffic data. Change passwords everywhere. Sites like reddit (formerly), Discord, GitHub, DigitalOcean, and tons of others use or have used Cloudflare including us.
Oh, and you should probably use two-factor authentication. Many sites support it like Google and GitHub. We support it.
Find affected sites: github.com/pirate/sites-using-cloudflare
Bug report: bugs.chromium.org/p/project-zero/issues/detail?id=1139
Cloudflare blog post: blog.cloudflare.com/incident-r…by-cloudflare-parser-bug/
For 2FA, use something like Google Authenticator or Authy.
itunes.apple.com/us/app/google…nticator/id388497605?mt=8
play.google.com/store/apps/det…apps.authenticator2&hl=en
itunes.apple.com/us/app/authy/id494168017?mt=8
play.google.com/store/apps/details?id=com.authy.authy&hl=en
Oh, and you should probably use two-factor authentication. Many sites support it like Google and GitHub. We support it.
Find affected sites: github.com/pirate/sites-using-cloudflare
Bug report: bugs.chromium.org/p/project-zero/issues/detail?id=1139
Cloudflare blog post: blog.cloudflare.com/incident-r…by-cloudflare-parser-bug/
For 2FA, use something like Google Authenticator or Authy.
itunes.apple.com/us/app/google…nticator/id388497605?mt=8
play.google.com/store/apps/det…apps.authenticator2&hl=en
itunes.apple.com/us/app/authy/id494168017?mt=8
play.google.com/store/apps/details?id=com.authy.authy&hl=en